Product by Astro
\@astrojs\/node
4 known vulnerabilities in \@astrojs\/node (Astro), 0 of them actively exploited (CISA KEV).
Key figures
4
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-25545 | Astro has Full-Read SSRF in error rendering via Host: header injection | 8.6 | |
| High | CVE-2026-27729 | Astro has memory exhaustion DoS due to missing request body size limit in Server Actions | 5.9 | |
| High | CVE-2026-29772 | Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands | 5.9 | |
| High | CVE-2026-27829 | Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize | 6.5 |